Privacy Notice
Last updated: 11 July 2026
1. Who we are
Cram Corner is operated by Chané Scheepers. For personal data that you provide when you use Cram Corner, we act as the data controller. You can reach us through the in-app support channel for any privacy question.
2. What we collect and why
- Account data — email address, authentication identifiers, and (if you sign in with Google) the profile fields Google shares. Used to create and secure your account. Legal basis: performance of a contract.
- Study content you upload — PDFs, notes, images, and the questions, decks, and answers derived from them. Used to provide the Service to you. Legal basis: performance of a contract.
- Usage and telemetry — pages visited, features used, import counts, errors, device and browser information, IP address. Used to operate, secure, and improve the Service and to prevent fraud and abuse. Legal basis: legitimate interests.
- Support messages — anything you send us. Used to respond to you. Legal basis: legitimate interests.
3. Who we share it with
We share personal data only with:
- Service providers / subprocessors we rely on to run the Service — hosting and database, authentication, analytics, error monitoring, and AI model providers used to generate questions and explanations from content you upload.
- Professional advisers (for example legal or accounting) where necessary.
- Authorities where we are required to disclose data by law or to protect our rights.
We do not sell personal data.
4. International transfers
Some of our subprocessors are located outside the UK / EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.
5. Retention
We keep account data and study content for as long as your account exists. If you delete your account, we delete or anonymise the associated content within a reasonable period, except where we must keep records for legal, tax, or fraud prevention reasons. Backups age out on a rolling schedule. Usage logs are kept for a limited period for security and debugging.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. UK / EEA users also have the right to lodge a complaint with their local data protection authority. To exercise any of these rights, contact us through the in-app support channel; we will respond within one month.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege policies for administrative access. No system is perfectly secure and we cannot guarantee absolute security.
8. Cookies
We use essential cookies and local storage to keep you signed in and to remember your preferences. These are strictly necessary to operate the Service. If we add analytics or marketing cookies in the future, we will surface a cookie notice with controls to manage them.
9. Changes
If we make material changes to this notice we will announce them in the Service or by email. Continued use after the changes take effect constitutes acceptance of the updated notice.